Error: MigrationPermanentException -Unauthorized

[emadadel2008]

I have Migration from google g suite to office 365 and when i make sync it issue 

User status

Data migrated:

Migration rate:

Last successful sync date:

Error: MigrationPermanentException: The call to https://www.googleapis.com/oauth2/v4/token returned with status code Unauthorized: Unauthorized Error response: unauthorized_client Error description: Client is unauthorized to retrieve access tokens using this method, or client not authorized for any of the scopes requested. --> The call to https://www.googleapis.com/oauth2/v4/token returned with status code Unauthorized: Unauthorized Error response: unauthorized_client Error description: Client is unauthorized to retrieve access tokens using this method, or client not authorized for any of the scopes requested.

 Can help me 

[#2]

Well, make sure the token is valid, and has the necessary permissions/scopes as detailed here: https://docs.microsoft.com/en-us/exchange/mailbox-migration/perform-g-suite-migration#grant-access-t...

Other than that, open a support case, this forum is not really for troubleshooting.

[#3]

@emadadel2008 Have you had any luck with this?  I am experiencing the same issue.  I also have two separate service requests open and MS tech have yet to assist in help me resolve this or point me in the right direction.  I have followed the steps outlined in the migration documents but still no resolve.

[#4]

@MMartinez07  

Well, make sure the token is valid, and has the necessary permissions/scopes as detailed here: https://docs.microsoft.com/en-us/exchange/mailbox-migration/perform-g-suite-migration#grant-access-t...

make sure  you have done this point "Grant access to the service account for your Google tenant" in  https://docs.microsoft.com/en-us/exchange/mailbox-migration/perform-g-suite-migration#grant-access-t...

Grant access to the service account for your Google tenant

1. Go to the G Suite Admin page and sign in as G Suite admin for your tenant.

2. Click Security, then click Advanced settings, and then click Manage API client access.

3. In Client Name, type the ClientId for the service account you created in the Create a Google Service Account section above.

4. In API Scopes, add the required scopes in comma-separated format, with no spaces in between. For example, https://mail.google.com/,https://www.googleapis.com/auth/calendar,https://www.google.com/m8/feeds/,h.... If the API Scopes are entered incorrectly, the resulting list won't match and the migration process will fail later, after you start the migration batch.

5. Click Authorize. Verify that the resulting list shows "Email (Read/Write/Send)", "Calendar (Read-Write)", "Contacts (Read/Write)", and "https://www.googleapis.com/auth/gmail.settings.sharing".

    Note

[#5]

Hi @emadadel2008 ,

I had the same issue but from within Gsuite admin I went to Security > API Permissions and then added the Service Account as a trusted app.  I could then see mail migrating across to the O365 mailboxes from gsuite.

Hope it helps.

[#6]

Thank you @Cyber-groupcouk and and @emadadel2008. 

100% completion report, too. 5th time lucky.  

[#7]

@idacike 

Hello, I have de same problem. I have reviewed the solutions that you have commented but it still does not work.

Did you do something else?

Thank you.

[#8]

This video might be useful to cross-check the steps. https://youtu.be/1FTGIcNWRQ4

I restarted the process from the beginning. There was a step which I missed the first couple of times and the video actually help me pick that up along with the suggestions in this forum thread.

[#9]

@idacike 

Thanks! fixed with the video instructions.

[#10]

Bueno!